92493 matches found
CVE-2026-111583
Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can pla...
EEF-CVE-2026-109823 Host filesystem path disclosure via DNS rebinding
Summary An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/connect or via the rendered toolbar. Neither response checks the Host header. A web page that rebinds its own domain to the loopback address can therefore read the tag wi...
EUVD-2026-111079
Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can pla...
EUVD-2026-111077
Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a...
CVE-2026-92374 Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS
A time-of-check time-of-use TOCTOU race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious...
CVE-2026-92374
TeamViewer Full Client and Host for macOS prior to version 15.83 are vulnerable to a local privilege escalation via a TOCTOU race condition and improper symbolic link handling in the privileged helper. A local attacker with low privileges can bypass installer package verification to install a mal...
eJPTv2-Notes
description: eLearnSecurity Junior Penetration Tester eJPT v2 Notes 📝 eJPTv2-Notes eJPT - © eLearnSecurity | INE Course duration & Topics ⏳📚 145 hours 56h of videosActivities: 4 sections , 12 courses , 229 videos, 154 quizzes, 120 labs Assessment Methodologies & Auditing 27 hours 11h of videos...
CVE-2026-117553
Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by poisoning the Host header. Attackers send signed-in users authorization links using responsemode=formpost to capture...
CVE-2025-29279
CVE-2025-29279 To exploit this vulnerability, the attacker must insert the payload example.com;echo 'testing' into the "Host Address" in Traceroute6 Diagnostics in the Diagnostics section...
CloudPanel 2.5.4-3 - nginx Virtual-Host Configuration Injection in the Site-Sett — Detect
Fingerprint / reachability check for CloudPanel 2.5.4-3 - nginx Virtual-Host Configuration Injection in the Site-Settings Root Directory Field CWE-93 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for CloudPanel 2.5.4-3 - nginx Virtual-Host Configuration Injection in the Site-Settings Roo...
CVE-2026-117553 Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover via Host Header Poisoning
Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by poisoning the Host header. Attackers send signed-in users authorization links using responsemode=formpost to capture...
EUVD-2026-110831
Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by poisoning the Host header. Attackers send signed-in users authorization links using responsemode=formpost to capture...
CVE-2026-117553 Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover via Host Header Poisoning
Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by poisoning the Host header. Attackers send signed-in users authorization links using responsemode=formpost to capture...
CVE-2026-117553
Umbraco CMS versions prior to 17.7.2 and 18.2.2 are vulnerable to an authentication bypass via Host header poisoning . An unauthenticated attacker can register malicious OAuth redirect URIs by manipulating the Host header. By sending signed-in users specific authorization links (using response_mo...
CVE-2026-117553
Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by poisoning the Host header. Attackers send signed-in users authorization links using responsemode=formpost to capture...
Important: Red Hat Security Advisory: flatpak-builder security update
An update for flatpak-builder is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
CVE-2026-25604-PoC
CVE-2026-25604 PoC Host Header Injection leading to SAML authentication bypass in Apache Airflow's AWS Auth Manager An attacker can inject a malicious Host header into the SAML login flow, causing the Assertion Consumer Service ACS URL to point to an attacker-controlled server. This allows the...
CVE-2026-113644 iofogctl command injection via Controller provisioning response
In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands edgelet provision and edgelet config cert on supported releases; iofog-agent provision and iofog-agent...
CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE-
CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE- Reference: https://b4ny4n.github.io/network-pentest/2020/08/01/cve-2020-13151-poc-aerospike.html exploit.py - python code to run...
